Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
File: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer (raw, json)
Hash identifier: tQzjecMRAYrD2mQW/bDu3qm5B2WDmqA6l7yE2+iISao=
Subject key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC07C57CDE33772BD9902F1EC6B208
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60592
IP: 91.207.188.0/23
IP: 185.28.192.0/22
IP: 185.38.108.0/22
IP: 185.82.212.0/22
IP: 2a00:a160::/29
IP: 2a00:fea0::/29
IP: 2a03:6920::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:07:c5:7c:de:33:77:2b:d9:90:2f:1e:c6:b2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:f8:8a:16:ea:be:75:86:e7:c9:d4:59:82:
2a:69:98:02:1b:ab:73:d1:bb:b5:41:36:74:cb:9f:
7f:57:75:96:ba:12:6e:29:82:5e:a4:21:8b:2b:4d:
29:76:ea:6b:76:57:a6:19:9e:9e:e1:01:05:8f:0a:
55:db:aa:6f:41:6f:90:82:b4:23:6f:0a:19:43:a1:
b5:57:2d:c5:94:35:2f:f8:9c:aa:28:15:f0:c4:b3:
9a:eb:4e:5d:20:1b:0c:e7:86:3c:56:0c:9c:01:75:
7e:89:62:67:37:78:70:1f:67:21:06:4c:94:35:b6:
97:1b:3b:d2:07:15:d3:e6:d1:e4:49:98:12:8d:6d:
06:51:2a:e1:6d:a6:80:90:44:a8:bc:08:96:1d:5e:
52:d7:1f:e9:63:61:9a:ac:7e:51:82:6b:29:8e:cb:
83:e2:34:5f:b8:9b:ee:ee:4f:0e:31:da:78:fc:4d:
ea:9a:b9:b3:9b:b8:7e:e4:a2:a7:eb:f9:37:89:60:
be:74:7c:b2:bd:1c:fd:2b:95:b9:6f:64:32:d2:92:
3b:17:39:6b:0c:26:cb:33:d4:6c:f1:f6:e0:4d:79:
88:cf:b7:cd:f3:17:35:9f:65:ba:61:e5:cd:24:7a:
99:83:0c:4f:d5:de:48:3f:e9:38:0a:02:30:37:c6:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.188.0/23
185.28.192.0/22
185.38.108.0/22
185.82.212.0/22
IPv6:
2a00:a160::/29
2a00:fea0::/29
2a03:6920::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60592
Signature Algorithm: sha256WithRSAEncryption
a3:0a:53:2c:39:c6:3a:03:ce:69:c2:12:8e:bb:0c:f8:44:6d:
75:43:6c:40:92:9f:92:0a:de:3b:12:21:f3:ff:eb:0e:e1:a9:
41:66:38:9b:87:e2:f2:95:4b:70:8e:6a:a9:3f:07:b3:65:bc:
f5:66:31:5c:a8:21:8f:9f:ff:1d:e0:84:a5:18:a8:c9:40:90:
e5:4c:7d:6e:31:ce:11:bf:9e:57:01:a7:1c:38:9e:35:f7:1f:
46:18:5e:42:1e:4b:4f:dd:c8:bf:22:03:a7:76:2e:50:22:7d:
3c:b0:36:d7:e2:b1:8f:91:ce:e2:4f:8b:8f:f4:6f:60:94:a9:
9e:24:62:f6:c5:3e:1b:6b:12:b5:ee:85:44:18:d5:28:93:17:
b8:43:21:38:5b:f2:39:d8:6d:11:45:69:3a:c3:d4:c3:e5:5b:
38:2b:81:67:79:54:93:7d:53:f9:c0:7c:e3:1c:f0:55:9c:34:
00:20:4d:91:cb:b1:f1:f8:73:b5:d4:ad:9e:cd:92:19:1c:cd:
b9:65:27:df:c4:cd:aa:82:e6:31:8b:be:80:08:1e:63:74:15:
22:51:c7:56:07:eb:c2:59:52:e2:63:b5:4b:59:85:55:04:d2:
5f:06:af:6a:3c:c9:81:a7:79:94:23:0b:31:a4:2b:80:92:67:
51:a3:1c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:52:02 2024 by rpki-client on console-ams.rpki-client.org